Hacker News new | ask | show | jobs
by Scaevolus 3296 days ago
I think OAuth logins are a nice compromise. "Login with Google / Facebook / ..." with one click works well!

Unfortunately, some sites use it to just get your email address, and still require you to make a password for them, which defeats the purpose and decreases user trust in the benefits of going through the flow.

1 comments

This can be pretty annoying for users and developers though. If the user forgets what account they last used and selects a different one next time then it ends up creating an entirely new account unassociated with the first. If I ever do social integration, I require a plain old email based login first and then allow them to connect their social accounts to it.
One way around this (from the developer's side) is to federate together different identities for a user using something like dex [1], and segregating your login and signup paths, so attempts to login will never create a separate account.

[1] https://github.com/coreos/dex